CVE-2008-0944 describes a denial-of-service vulnerability affecting Ipswitch Instant Messaging (IM) versions 2.0.8.1 and earlier. Remote attackers can exploit this by sending a malformed version field containing a zero, leading to a NULL dereference and application crash. This vulnerability has a CVSS score of 5.0, indicating a medium severity, with a network attack vector, low complexity, and no authentication required, primarily impacting availability. While there is an ExploitDB entry for "Multiple Vulnerabilities" in this product, there is no specific exploit code for this CVE in Metasploit or Nuclei, and it is not listed in the CISA KEV catalog, suggesting no known active exploitation. Community discussion and media coverage are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.0.8.1CPE matchmatch criteria | cpe:2.3:a:ipswitch:instant_messaging:2.0.8.1:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.